Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1779.
AI-analyzed exploit summary This is a functional proof-of-concept for CVE-2014-1779, demonstrating a use-after-free vulnerability in Internet Explorer 9 and 10. The exploit triggers memory corruption by freeing a CFormElement object and then writing to its freed memory, as shown in the disassembly and heap analysis.
Description
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.
Exploits (1)
This is a functional proof-of-concept for CVE-2014-1779, demonstrating a use-after-free vulnerability in Internet Explorer 9 and 10. The exploit triggers memory corruption by freeing a CFormElement object and then writing to its freed memory, as shown in the disassembly and heap analysis.